SSL, CGI, and forms

[ddow]

I'm trying to post a survey (form) that will be encrypted while the survey is being answered. I have installed self-signed certificates in both domain.com and sub.domain.com.

I can submit the form without using SSL correctly either from domain.com using a cgi script, or from sub.domain.com using Frontpage. If I attempt to submit the form using SSL (https://domain.com/form.htm or https://sub.domain.com/form.htm) I error out.

When using the cgi script I get a 404. When using the Frontpage provided version I get a 500.

Errors received on the Frontpage version are below. I thought it might be a Frontpage issue so I tried the cgi script from domain.com and ended up with problems. I read in an Apache forum that SSL doesn't work as well with virtual domains under Apache as most would like. Any one have suggestions?

Thanks, Dennis


Prior to loading survey.htm, this was generated.
[Sun Jan 14 12:30:33 2007] [error] [client 70.56.235.221] File does not exist: /usr/local/apache/htdocs/survey.htm
/home/seahorse/public_html: UNLOADED CONFIGURATION HIT CAUGHT: https://seahorsesecurity.com/survey.htm

After submitting survey.htm, this was generated.
[Sun Jan 14 12:31:11 2007] [error] [client 70.56.235.221] Premature end of script headers: /usr/local/frontpage/version5.0/apache-fp/_vti_bin/fpexe
[Sun Jan 14 12:31:11 2007] [error] [client 70.56.235.221] invalid CGI ref "/500.php" in /usr/local/apache/htdocs/500.shtml



In another attempt error logs showed:

[Wed Jan 17 10:00:50 2007] [error] [client 70.56.235.221] File does not exist: /home/seahorse/public_html/survey/_vti_inf.html
[Wed Jan 17 10:00:50 2007] [error] [client 70.56.235.221] File does not exist: /home/seahorse/public_html/survey/404.shtml
[Wed Jan 17 10:01:42 2007] [error] [client 70.56.235.221] File does not exist: /usr/local/apache/htdocs/survey.htm
/home/seahorse/public_html/survey: UNLOADED CONFIGURATION HIT CAUGHT: https://survey.seahorsesecurity.com/survey.htm
[Wed Jan 17 10:01:53 2007] [error] [client 70.56.235.221] Premature end of script headers: /usr/local/frontpage/version5.0/apache-fp/_vti_bin/fpexe
[Wed Jan 17 10:01:53 2007] [error] [client 70.56.235.221] invalid CGI ref "/500.php" in /usr/local/apache/htdocs/500.shtml

[ddow]

Tech support suggests that a dedicated IP and non-self signed SSL cert should fix this. I've ordered both and will post the results after both are up and working.

Dennis

[ddow]

The dedicated IP and certificate did fix the issue. A bit frustrating that I had the added expense, but sometimes that's the way it goes.

Dennis